Cybersecurity Senior Penetration Tester

Elliott Davis pairs forward-thinking tax, assurance and consulting services with industry-leading workplace culture. Our nine offices — located in the fastest growing cities in the US — are built on a foundation of inclusivity, collaboration, and collective growth. We work daily to provide exceptional service to our people, customers, and our communities. Audit and assurance services are provided by Elliott Davis, LLC (doing business in NC and D.C. as Elliott Davis, PLLC), a licensed CPA firm.

As a member of the Elliott Davis Digital Cyber team, you will be responsible for having an in-depth knowledge of ethical hacking techniques and countermeasures to provide a variety of cybersecurity services to our clients. Our goal is to help protect our client’s cybersecurity with the services we provide.

Responsibilities

• Execute internal and external penetration tests against enterprise environments, including network, web application, API, mobile, wireless, and cloud-hosted systems, using industry‑standard commercial and open‑source tools
• Perform open‑source intelligence (OSINT) reconnaissance to support attack surface mapping and social engineering simulations
• Conduct wireless security assessments, including WPA2/3 testing, rogue access point detection, and segmentation validation
• Perform internal configuration reviews and vulnerability assessments, identifying attack paths, privilege escalation opportunities, and systemic security weaknesses
• Document findings clearly and accurately, including risk ratings, exploitation evidence, business impact, and actionable remediation guidance
• Collaborate with peers through technical peer review and quality assurance processes to ensure consistency and accuracy of deliverables
• Stay current with emerging vulnerabilities, attack techniques, and tooling through ongoing research and hands‑on lab work

Requirements

• A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Computer Engineering, or a closely related technical field
• 4+ years of hands-on penetration testing experience, preferably in a client-facing consulting environment
• Demonstrated experience performing network, web application, API, vulnerability, and cloud security assessments
• One or more current penetration testing certifications (e.g., OSCP, eCPPT, GPEN, OSWE, GWAPT, eWPT, PNPT)
• Strong analytical and problem-solving skills with the ability to think like an attacker and assess real-world risk
• Familiarity with common security and compliance frameworks (PCI DSS, HIPAA, NIST, CIS, ISO 27001)
• Ability to manage multiple engagements concurrently while maintaining high-quality client deliverables
• Strong technical writing and presentation skills, with the ability to communicate effectively to both technical and non-technical audiences

• Comfortable working in a collaborative team environment with peer review and shared ownership of outcomes
• Willingness to support after-hours testing as required by client engagements
• Patience, flexibility, and a sense of humor are a must

#LI-EH1

#LI-HYBRID

We believe that when our employees are able to thrive in all facets of life, their work and impact are that much greater.
That's right – all aspects of life, not just your life as an employee, because we understand that there's life beyond your job. Here are some of the ways our work works for your life, your growth, and your well-being: 
•    generous time away and paid firm holidays, including the week between Christmas and New Year’s
•    flexible work schedules
•    16 weeks of paid maternity and adoption leave, 8 weeks of paid parental leave, 4 weeks of paid  and caregiver leave (once eligible) 
•    first-class health and wellness benefits, including wellness coaching and mental health counseling
•    one-on-one professional coaching
•    Leadership and career development programs
•    access to Beyond:  a one-of-a kind program with experiences that help you expand your life, personally and professionally

NOTICE TO 3RD PARTY RECRUITERS
Notice to Recruiters and Agencies regarding unsolicited resumes or candidate submissions without prior express written approval. Resumes submitted or candidates referred to any employee of Elliott Davis by any external recruiter or recruitment agency by any means (including but not limited to via Internet, e-mail, fax, U.S. mail, and/or verbal communications) without a properly executed written contract for a specified position by an authorized member of the Talent Acquisition team become the property of Elliott Davis. Elliott Davis will not be responsible for, or owe any fees associated with, referrals of those candidates and/or for submission of any information, including resumes, associated with individuals.
 

ADA REQUIREMENTS
The physical and cognitive/mental requirements and the work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Requirements
While performing the duties of this job, the employee is:
•    Regularly required to remain in a stationary position; use hands repetitively to operate standard office equipment; and to talk or hear, both in person and by telephone
•    Required to have specific vision abilities which include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus

Cognitive/Mental Requirements
While performing the duties of this job, the employee is regularly required to:
•    Use written and oral communication skills. 
•    Read and interpret data, information, and documents. 
•    Observe and interpret situations. 
•    Work under deadlines with frequent interruptions; and
•    Interact with internal and external customers and others in the course of work.